ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce vulnerabilities

Product

ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce

by wedevs · last CVE Aug 26, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 0Medium 3Low 0

Severity

Exploitation

Watch

Add ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-18080	9.8	1%	Aug 26	ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment Affected: through 1.17.8
CVE-2026-11421	6.5	1%	Aug 5	ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' Parameter Affected: through 1.17.4
CVE-2026-13011	6.5	0%	Jul 9	ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support <= 1.17.5 - Authenticated (HR Manager+) SQL Injection via 'orderby' Parameter Affected: through 1.17.5
CVE-2026-15349	4.3	0%	Jul 17	ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Company Location Creation via wp_ajax_erp-company-location AJAX Handler Affected: through 1.17.6